First published: Tue Nov 09 2021(Updated: )
psutil is a module providing an interface for retrieving information on all running processes and system utilization (CPU, memory, disks, network, users) in a portable way by using Python.<br>Security Fix(es):<br><li> python-psutil: double free because of refcount mishandling (CVE-2019-18874)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/python-psutil | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python-psutil-debugsource | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python3-psutil | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python3-psutil-debuginfo | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python-psutil-debugsource | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python3-psutil | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python3-psutil-debuginfo | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python-psutil-debugsource | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python3-psutil | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python3-psutil-debuginfo | <5.4.3-11.el8 | 5.4.3-11.el8 |
redhat/python-psutil-debugsource | <5.4.3-11.el8.aa | 5.4.3-11.el8.aa |
redhat/python3-psutil | <5.4.3-11.el8.aa | 5.4.3-11.el8.aa |
redhat/python3-psutil-debuginfo | <5.4.3-11.el8.aa | 5.4.3-11.el8.aa |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:4324 is classified as important due to a double free vulnerability in the psutil module.
To fix RHSA-2021:4324, you should update the affected packages to version 5.4.3-11.el8 or later.
The affected packages for RHSA-2021:4324 include python-psutil, python3-psutil, and their corresponding debug sources.
The vulnerability type for RHSA-2021:4324 is a memory management issue, specifically a double free caused by reference count mishandling.
RHSA-2021:4324 was released as a security advisory by Red Hat in December 2021.